Mattermost
Mattermost v11.11 adds data spillage exposure tracking as v12.0 breaking changes loom
Comparison · Collab
Passbolt vs Joplin
A side-by-side editorial comparison of Passbolt and Joplin — release velocity, themes, recent moves, and the top alternatives to consider.
Passbolt vs Joplin: at a glance
What is Passbolt?
Passbolt keeps rebuilding the sharing dialog because that is where its access model leaks.
Three consecutive releases have gone into permission transparency. 5.14 introduced confirmation prompts before editing shared resources and surfaced group members in the access list; 5.14.3 corrected two behaviours it got wrong; 5.15 adds badges showing whether a permission is added, modified or deleted, and lets a deletion be rolled back before confirmation. 5.15 also moves sessions into the database with a PurgeSessions command and a healthcheck reporting the active provider, and closes three externally reported bypasses around personal-folder sharing and V5 tag promotion.
What is Joplin?
Joplin 3.7 ships AI chat, semantic search, and MCP integration — all off by default, all controllable by the user.
Joplin 3.7 is the product's first real AI release: an in-app chat panel for querying the currently open note, semantic (meaning-based) search across notebooks, and an MCP server that lets external AI assistants connect to Joplin's note graph. The implementation is privacy-first by design — AI is disabled by default, local models (Ollama, LM Studio) are explicitly supported, and cloud AI services only receive the specific note content relevant to a request rather than the full notebook. A companion documentation post published September 14 lays out the privacy model explicitly.
Passbolt vs Joplin: editorial side-by-side
Passbolt
5.0COLLAB
Passbolt keeps rebuilding the sharing dialog because that is where its access model leaks.
◆ Current state
Three consecutive releases have gone into permission transparency. 5.14 introduced confirmation prompts before editing shared resources and surfaced group members in the access list; 5.14.3 corrected two behaviours it got wrong; 5.15 adds badges showing whether a permission is added, modified or deleted, and lets a deletion be rolled back before confirmation. 5.15 also moves sessions into the database with a PurgeSessions command and a healthcheck reporting the active provider, and closes three externally reported bypasses around personal-folder sharing and V5 tag promotion.
◆ Where it's heading
The product is treating accidental over-sharing as its primary risk, and the fix is repeated iteration on the moment of change rather than a new permission model. The company has said this is staged work — folder moves and richer preview dialogs are named as future extensions. In parallel the platform side is maturing for larger installs: database-backed sessions, edition switching in-app since 5.13, healthcheck coverage, SCIM administrator-deletion guards. Autofill has just started its own multi-release arc, with 5.15 explicitly the first step.
◆ Prediction
The next release should extend confirmation prompts to folder move operations, and the notes flag that the SSO egress guard will default to on. Autofill form classification is the other named thread, with a technical write-up promised after the following release.
Joplin
6.3COLLAB
Joplin 3.7 ships AI chat, semantic search, and MCP integration — all off by default, all controllable by the user.
◆ Current state
Joplin 3.7 is the product's first real AI release: an in-app chat panel for querying the currently open note, semantic (meaning-based) search across notebooks, and an MCP server that lets external AI assistants connect to Joplin's note graph. The implementation is privacy-first by design — AI is disabled by default, local models (Ollama, LM Studio) are explicitly supported, and cloud AI services only receive the specific note content relevant to a request rather than the full notebook. A companion documentation post published September 14 lays out the privacy model explicitly.
◆ Where it's heading
Joplin is repositioning from a sync-agnostic note-taking app into an AI-native knowledge base, differentiated by opt-in, local-first controls. The HMD Terra M preload partnership and the warrant canary point to a deliberate push toward privacy-conscious enterprise and professional users who distrust cloud-first tools. The MCP integration is particularly strategic: it makes Joplin's note graph accessible to external orchestration pipelines without locking into any particular AI provider.
◆ Prediction
The next major release will likely expand AI chat to multi-note context — currently limited to the open note — and add more configurable MCP tools. The HTR (handwritten text recognition) project from the 2024 French government partnership is also likely to appear in a near-term release.
Alternatives to Passbolt and Joplin
Other Collab products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Passbolt or Joplin.
SiYuan
SiYuan v3.8.4 beta cycle adds agent-controlled database fields, MiniMax image gen, and skill file management
GitHub
GitHub Copilot gets cost-aware inference tiers as enterprise AI tooling tightens across the platform.
Nextcloud
Nextcloud runs three LTS branches in parallel, shipping bug fixes and quiet performance wins.
Teable
Teable adds Composio integration and Scheduled Routines, pivoting from spreadsheet to agentic workflow platform.
Happeo
Happeo doubles down on SEO content to own intranet search terms for mid-market buyers.
See all Passbolt alternatives → · See all Joplin alternatives →
Recent activity from Passbolt and Joplin
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 2d agoJoplinYour notes and AI: privacy first
- 16d agoJoplinWhat's new in Joplin 3.7 ⚡
- 26d agoPassbolt5.15 adds database sessions and closes shared-tag permission bypasses
- 1mo agoPassbolt5.14.3 limits the permission dialog to actual secret changes
- 1mo agoPassbolt5.14 adds confirmation prompts before shared-resource edits
- 3mo agoPassbolt5.13 adds in-app switching between Community and Pro
- 4mo agoPassbolt5.12 makes the Safari extension generally available
- 4mo agoJoplinWhat's new in Joplin 3.6
- 6mo agoJoplinIntroducing our Warrant Canary
- 7mo agoJoplinJoplin will come preloaded on the HMD Terra M
- 8mo agoJoplinWhat's new in Joplin 3.5
Frequently asked questions
What is the difference between Passbolt and Joplin?
They serve adjacent needs but don't currently overlap on shipped themes. Joplin is currently shipping more aggressively (velocity 6.3 vs 5.0), with 1 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Passbolt better than Joplin?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Joplin is currently shipping more aggressively (velocity 6.3 vs 5.0), with 1 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Collab products to evaluate alongside.
What are the best alternatives to Passbolt?
Top Passbolt alternatives in Collab are ranked by recent ship velocity. Browse the "Passbolt alternatives" section above for the current picks, or visit /alternatives/passbolt for the full list with editorial commentary on each.
What are the best alternatives to Joplin?
Top Joplin alternatives in Collab are ranked by recent ship velocity. Browse the "Joplin alternatives" section above for the current picks, or visit /alternatives/joplin for the full list with editorial commentary on each.